It can be scary to get a text message from someone claiming to be the “IRS,” saying they are filing a lawsuit against you for suspicious activity. They might even say you’ll be arrested unless you send your personal information right away. But you should never do this.
Some time ago, the Internal Revenue Service (IRS) warned people about a rise in fake text messages, called “smishing,” that are meant to steal your personal and financial information. The IRS has found thousands of fake websites this year, with the number of cases growing fast in the past few weeks.
“Recently, the IRS has seen many large-scale smishing attacks. These campaigns send thousands, or even hundreds of thousands, of fake IRS messages in just a few hours or days,” said IRS Commissioner Chuck Rettig in a press release.
What are “smishing scams”?
Smishing is a scam where criminals send fake text messages pretending to be from a trusted company or organization. Their goal is to trick you into sharing your personal information.
In more advanced scams, they might send a “verification code” to your phone. Then, they ask you to send the code back to them by text or tell them over the phone. If you share the code, the scammers can use it to get into your accounts and steal your information.
Never send verification codes to people or numbers you don’t trust.
How to recognize fake IRS texts
The most important thing to remember is that the IRS will never email or text you to ask for personal or financial information, like your account numbers. The IRS always contacts people through official mail first.
Scammers may send texts pretending to be from the IRS. These texts might offer fake services like COVID relief, tax credits, or help setting up accounts. If you get a link asking you to enter personal information, even if it promises a service in return, that is a big warning sign.
What to do if you get one of these texts
A good rule to follow when you’re unsure about giving sensitive information over the phone, text, or online is to call the official number of the organization. Ask if the information they’re asking for is really needed. If the organization doesn’t have a record of asking for that information, you can be sure you’re being targeted by a smishing scam.
The next step is to report the number to phishing@irs.gov. This helps the IRS track new scams and report them to service providers who can stop these fake messages from reaching others.
Follow these steps to report smishing to the IRS:
- Send an email to phishing@irs.gov.
- Copy the caller ID number (or email address).
- Paste the number (or email address) into the email.
- Press and hold the SMS/text message, then select “copy.”
- Paste the message into the email.
- If possible, include the date, time, time zone, and phone number that received the message.
- Send the email to phishing@irs.gov.